CVE-2015-1673

The Windows Forms aka WinForms libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-assisted remote attackers to execute arbitrary code via a crafted partial-trust application, aka "Windows Forms Elevation of Privilege Vulnerability."...

CVE-2015-3336

Google Chrome before 42.0.2311.90 does not always ask the user before proceeding with CONTENTSETTINGSTYPEFULLSCREEN and CONTENTSETTINGSTYPEMOUSELOCK changes, which allows user-assisted remote attackers to cause a denial of service UI disruption by constructing a crafted HTML document containing...

CVE-2015-3334

browser/ui/websitesettings/websitesettings.cc in Google Chrome before 42.0.2311.90 does not always display "Media: Allowed by you" in a Permissions table after the user has granted camera permission to a web site, which might make it easier for user-assisted remote attackers to obtain sensitive...

UBUNTU-CVE-2015-3334

browser/ui/websitesettings/websitesettings.cc in Google Chrome before 42.0.2311.90 does not always display "Media: Allowed by you" in a Permissions table after the user has granted camera permission to a web site, which might make it easier for user-assisted remote attackers to obtain sensitive...

GLSA-201502-10 : libpng: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201502-10 libpng: User-assisted execution of arbitrary code Two vulnerabilities have been discovered in libpng: The pnguserversioncheck function contains an out-of-bounds memory access error libpng 1.6.15 Release Notes The...

GLSA-201502-09 : Antiword: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201502-09 Antiword: User-assisted execution of arbitrary code A buffer overflow vulnerability has been found in wordole.c in Antiword. Impact : A remote attacker could entice a user to open a specially crafted document using...

GLSA-201412-53 : MIT Kerberos 5: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-53 MIT Kerberos 5: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in MIT Kerberos 5. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could...

GLSA-201412-43 : MuPDF: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-43 MuPDF: User-assisted execution of arbitrary code Multiple vulnerabilities have been discovered in MuPDF. Please review the CVE identifier and Secunia Research referenced below for details. Impact : A remote attacker coul...

GLSA-201412-40 : FLAC: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-40 FLAC: User-assisted execution of arbitrary code A stack-based buffer overflow flaw has been discovered in FLAC. Impact : A remote attacker could entice a user to open a specially crafted .flac file using an application...

GLSA-201412-18 : FreeRDP: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201412-18 FreeRDP: User-assisted execution of arbitrary code FreeRDP does not properly validate user-supplied input, which could lead to an integer overflow in the xfPointerNew function. Impact : A remote attacker could execute...

CVE-2014-8472

CVE-2014-8472 affects CA Cloud Service Management prior to the Summer 2014 upgrade, where authentication tokens from an Identity Provider were not properly verified. This allowed a user-assisted remote attacker to bypass access restrictions via unspecified vectors. The issue was addressed in the ...

Code injection

The BlackBerry World app before 5.0.0.262 on BlackBerry 10 OS 10.2.0, before 5.0.0.263 on BlackBerry 10 OS 10.2.1, and before 5.1.0.53 on BlackBerry 10 OS 10.3.0 does not properly validate download/update requests, which allows user-assisted man-in-the-middle attackers to spoof servers and trigge...

CVE-2014-1369

WebKit in Apple Safari before 6.1.5 and 7.x before 7.0.5 allows user-assisted remote attackers to access file: URLs by leveraging a URL drag operation that originates at a crafted web site...

GLSA-201406-18 : rxvt-unicode: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201406-18 rxvt-unicode: User-assisted execution of arbitrary code rxvt-unicode does not properly handle OSC escape sequences, including those used to read and write X window properties. Impact : A remote attacker could entice a us...

CVE-2014-2720

IZArc 4.1.8 displays a file's name on the basis of a ZIP archive's Central Directory entry, but launches this file on the basis of a ZIP archive's local file header, which allows user-assisted remote attackers to conduct file-extension spoofing attacks via a modified Central Directory, as...

GLSA-201405-18 : OpenConnect: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201405-18 OpenConnect: User-assisted execution of arbitrary code A stack-based buffer overflow error has been discovered in OpenConnect. Impact : A remote attacker could entice a user to connect to a malicious VPN server, possibly...

GLSA-201405-23 : lib3ds: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-201405-23 lib3ds: User-assisted execution of arbitrary code An array index error has been discovered in lib3ds. Impact : A remote attacker could entice a user to open a specially crafted 3DS file using an application linked agains...

CVE-2014-3121

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands...

CVE-2014-3121

rxvt-unicode before 9.20 does not properly handle OSC escape sequences, which allows user-assisted remote attackers to manipulate arbitrary X window properties and execute arbitrary commands...

Fedora 19 : rxvt-unicode-9.20-1.fc19 (2014-5938)

Update to 9.20: http://cvs.schmorp.de/rxvt-unicode/Changes - Fix CVE-2014-3121: user-assisted arbitrary commands execution Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and...